-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 14:06:35 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: arm64 Version: 2:21.1.16-1.3+deb13u3 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-conova-02) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Closes: 1138680 Changes: xorg-server (2:21.1.16-1.3+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260) (Closes: #1138680) * sync: restart trigger list iteration in SyncChangeCounter after TriggerFired (CVE-2026-50261) (Closes: #1138680) * xkb: reject key types with num_levels exceeding XkbMaxShiftLevel (CVE-2026-50258) (Closes: #1138680) * xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259) (Closes: #1138680) * glx: fix reversed length check in ChangeDrawableAttributes (CVE-2026-50262) (Closes: #1138680) * saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow (CVE-2026-50263) (Closes: #1138680) * dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN (CVE-2026-50256) (Closes: #1138680) * dri2: Use booleans for (fake) front buffer tracking in do_get_buffers (CVE-2026-50264) (Closes: #1138680) * dri2: Deduplicate attachments in do_get_buffer (CVE-2026-50264) (Closes: #1138680) Checksums-Sha1: 7d5b5c707b616b38d584e06afc5c92814dadd7b8 2695292 xnest-dbgsym_21.1.16-1.3+deb13u3_arm64.deb 4ed492a3c397d42c0c957df79b9c4a1c3bcc0e54 2997640 xnest_21.1.16-1.3+deb13u3_arm64.deb 29b242634e9e7e5770e008f1498b38ceba3014af 14904 xorg-server_21.1.16-1.3+deb13u3_arm64-buildd.buildinfo 8df7900319fae7cd59bb5e9b67ed7d358c11c48a 3946020 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_arm64.deb 1004712beb35f3efb4f9442cf6f77fb2c101c97c 3246832 xserver-xephyr_21.1.16-1.3+deb13u3_arm64.deb 93e4af26f9a8355d1e3343cf5db2b7963a33f8de 5792140 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_arm64.deb 9f25d819a79789dbf6dbcb582e97dc6a4a17db3b 899864 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_arm64.udeb ddbe62656f9910d6130bdb73b69dabb43ad0555e 3640148 xserver-xorg-core_21.1.16-1.3+deb13u3_arm64.deb 868c2241070b60a4aae0564d263a3808fea459e3 2581580 xserver-xorg-dev_21.1.16-1.3+deb13u3_arm64.deb 44c2ffc832e7b45188265729698b819eb8c21bb6 9804 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_arm64.deb 23bd50666e7703597811c6a291d43e9a578acf17 2415492 xserver-xorg-legacy_21.1.16-1.3+deb13u3_arm64.deb 857b1e659254d0ec99cc2f53544c8a38685a93a4 3275628 xvfb-dbgsym_21.1.16-1.3+deb13u3_arm64.deb 59cf396e4d1d51f8d69f1ef4ec794d61e662bddb 3123328 xvfb_21.1.16-1.3+deb13u3_arm64.deb Checksums-Sha256: 21a13f0e1696b0e392a8dc2908c13c202f752089f64a23a65c27375e2a623b9b 2695292 xnest-dbgsym_21.1.16-1.3+deb13u3_arm64.deb 080ab28150e0fb25d50f7c2cbb2bff56ef755e407b73d6227a112555880ca864 2997640 xnest_21.1.16-1.3+deb13u3_arm64.deb 4b62bff7c2ff423012185ebb379bc5dec893e93b059c1b3bb8758785261064e3 14904 xorg-server_21.1.16-1.3+deb13u3_arm64-buildd.buildinfo 8a0b34868e44ea2e10c8ee3430484ee14bcfd1d7032ba686e7fac92d988ff923 3946020 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_arm64.deb 9364a5a85c00cb2c91a00a362462d155bf005455921951ced629dde315e97666 3246832 xserver-xephyr_21.1.16-1.3+deb13u3_arm64.deb fd8bd6b058b9cbda3a50a2d93e6d92eb2f072bd630b7edeb6a9ac7e2f5019de4 5792140 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_arm64.deb c70d87bf98ead1a0e4ea05e9984551d3e70b85dd5361de5871b059d308cc27da 899864 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_arm64.udeb 3c63611f239fd201c72b615f3d49248f5131d7f818f572b6efaec8142387d189 3640148 xserver-xorg-core_21.1.16-1.3+deb13u3_arm64.deb 5c91ab431359eb13a92f32ba29cdb6b8be0131fbbc7b8520131a81da4063ef16 2581580 xserver-xorg-dev_21.1.16-1.3+deb13u3_arm64.deb 29b21c2c742437d9fddf8cafd319e0b7cef4ce42782bb53cde1fac262567b346 9804 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_arm64.deb 54bd591b8fa06864f8bc5e9471316fe78ea3aa8160ded7cb29422c2ea2c65225 2415492 xserver-xorg-legacy_21.1.16-1.3+deb13u3_arm64.deb 7a12b5cda15f87096be6020e684fe334b9c23e58981af71032a4396ce7e981c3 3275628 xvfb-dbgsym_21.1.16-1.3+deb13u3_arm64.deb b44fef7c51c6c610864893d54df8753e8addf0fc6a906422e72b1c507d8de9a5 3123328 xvfb_21.1.16-1.3+deb13u3_arm64.deb Files: 3477c26cdb2674e78bc731a248654de7 2695292 debug optional xnest-dbgsym_21.1.16-1.3+deb13u3_arm64.deb 18a18a5230704aa8db008d5c4d54b65b 2997640 x11 optional xnest_21.1.16-1.3+deb13u3_arm64.deb a87e4489644b74f77400f5275e6e3a18 14904 x11 optional xorg-server_21.1.16-1.3+deb13u3_arm64-buildd.buildinfo 75c39583c1dd1b71d8e8456cefe18400 3946020 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_arm64.deb 1732932e661022b139cfcd062b53253f 3246832 x11 optional xserver-xephyr_21.1.16-1.3+deb13u3_arm64.deb 22fc4bae0030c266aed2f6ea78eb629d 5792140 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_arm64.deb 6b10540f67957fcccff4aba07d012c76 899864 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_arm64.udeb 2f6ce6aa38f85a0b4e7d5a0c4e28048f 3640148 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u3_arm64.deb ed89a3d5d6763264f2f38966005bce01 2581580 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u3_arm64.deb c2616700ae9273fd7dc18f68327a0fb7 9804 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_arm64.deb d1ba503bac0f205889742830a5fd6770 2415492 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u3_arm64.deb 53d917acbedd0ba3bb7a0d703d3ed8cb 3275628 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u3_arm64.deb ec1df38874dfbd6ee40576a4bc5929dc 3123328 x11 optional xvfb_21.1.16-1.3+deb13u3_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcgNjDiyOcnJRaE/rxc5dwsVCzVkFAmpJAloACgkQxc5dwsVC zVk0Ow/+Iy9ke736AsGdC3jIXZnUsT535E0xUE0ZGYyJtmjj6Xb9UeneigE99wHM 0DLQj6xhil1hvC9hRvfydaKOuXGZwQou086ZDShs0PXLp8rnNh+FUG1NS2pX1xPP Hvp0LE5f2AMbtjoZEAN7JAsR4MlmIJKbod9ecOyr+p+ppWQ85Bq8621KRgWpgeov WYCHe4NMwo/k9P6FCCZNonlpe1lSkO9fGYwnKht5CdecJO81/M7ijbIfqd4fKjYi LmhR3IqPLGiPW0+NfSW/2do89m4p6oTYRgsmwtdTmnMpeQtP/v+wnCF5DIrKZig7 mViL6xZ612wp7735jDIiaUAdGC/D1778kmBD7PQam1WIJDxKZ6jvFIbHMayp/iXm pUwNIYeDzJQc8dvJkBeK2a6y80wH0jiQvMwaAAuC7240mqOkdyEeVFUMLdwSP+pN UbznFiqgdc5X9l+Po3qu4ULqiYT5xxj5asRjeK017p4U+QTctMr4+PVyQ7tq+HLp pOYiZoXq/DgmxUhbAIYkxmLruK4RpYgQYd8P4D8angvE1tZ9MVIQBXBii8ICQbmb Lk78Kyj9HIdqLiJwqFSEXcsEAIMHSrg9aFLHZyAHeA5EunASeHw2I3Rd+EK2E+DG vTrlqp84LYlOdW5Gl6Bz/uUJB53kDUZsIraNwgW01ER600utyVk= =2Zhk -----END PGP SIGNATURE-----